• Provide Governance, Compliance and Audit for your account.
• CloudTrail is enabled by Default
• Get a history of events/ APIs calls made within AWS account by:

    - Console
    - SDK
    - CLI
    - AWS Services

• Can put logs from CloudTrail into CloudWatch logs or S3
• A trail can be applied to All Regions (default) or a single region.